Re: snort config

[waldo kitty <wkitty42 () windstream net>]

On 12/5/2012 14:36, Aisling Brennan wrote:
> Is there an option for setting threshold on a Snort signature so it slows the
> reporting down so it occurs only once per nnn secs per Src IP ie –____

yup... there's two methods that are very similar... do you want to use this in 
the rule or separately in the threshold file? each has it pluses and minuses...




------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!